Can `user` be `nil` here?